Privacy Policy

Devang Patel, trading as TodayBirthday.in, is the data controller for the personal data described in this policy. We are registered at E-801, Savan Plaza, Yogi Chowk, Surat, Gujarat 395010, India.

This policy explains what we collect when you use TodayBirthday.in, why we collect it, who we share it with, and the choices you have. It applies to our website, dashboard, and email communications.

For any privacy question or request, email devangfour@gmail.com.

Information you give us.

• Account data — name, email address, password hash (or Google sign-in identifier), and optional profile details such as username, bio, location, timezone, and avatar.
• Listing data — website names, URLs, launch dates, descriptions, logos, screenshots, categories, tech stacks, team and founder details, and social links you choose to publish.
• Community data — birthday wishes, stories, comments, time capsule messages, and follows.
• Support data — the name, email, subject, and message you submit through our contact form, plus a one-way hash of your IP address used solely to limit abuse.
• Billing data — see Payments below.

Information collected automatically. Session cookies that keep you signed in, and — where you have not disabled it — aggregate analytics about page views and referrers. We do not use advertising cookies or sell profiles to advertisers.

• To provide the Service — create your account, publish your listings, send birthday and milestone notifications you have enabled. Basis: performance of a contract.
• To process payments — take payment for website slots, issue receipts, handle refunds and chargebacks. Basis: performance of a contract and legal obligation.
• To keep the Service safe — moderate content, detect spam and fraud, enforce our Terms. Basis: legitimate interests.
• To improve the Service — understand which features are used, diagnose errors. Basis: legitimate interests.
• To communicate — reply to support requests, send service announcements, and — only if you opt in — a weekly digest. Basis: contract and consent.
• To meet legal and tax obligations — retain transaction records for the period the law requires. Basis: legal obligation.

We never see or store your card number, expiry date, or CVV. All payments run through Stripe's hosted checkout, which is PCI-DSS Level 1 certified. Your card details are entered directly on Stripe's page and are transmitted to Stripe, not to us.

What we do store against your account is limited to:

• the Stripe Checkout Session and Payment Intent identifiers;
• the amount, currency, and status of the payment;
• the number of website slots purchased;
• a link to the Stripe-hosted receipt;
• the date the payment succeeded or was refunded.

Stripe acts as an independent controller for the payment data it collects — including the billing address and any tax identifiers you provide at checkout. Its handling of that data is governed by the Stripe Privacy Policy.

We do not sell your personal data. We share it only with the service providers needed to run TodayBirthday.in, each bound by contract to protect it:

• Stripe — payment processing, fraud prevention, and receipts.
• Our hosting and database providers — to run the application and store its data.
• Cloudflare R2 — storage and delivery of images you upload.
• Our email provider — to deliver sign-in links, notifications, and support replies.
• Google Analytics — aggregate usage statistics, where enabled. Administrator sessions are excluded from tracking.

We may also disclose data where required by law, to enforce our Terms, or to protect the rights and safety of our users — and, in the event of a merger or acquisition, to the acquiring entity under equivalent protections.

TodayBirthday.in is a public directory by design. Website listings, company and founder profiles, published stories, birthday wishes, certificates, badges, and leaderboard positions are visible to anyone and may be indexed by search engines. Your email address, phone number, payment history, and support messages are never published. You can control the visibility of your personal profile in dashboard settings.

Our providers may process data outside your country, including in the United States and the European Union. Where data leaves its country of origin we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an equivalent mechanism offered by the provider.

• Account and listing data — while your account is active, and for up to 30 days after deletion to allow recovery from mistakes.
• Payment records — for as long as tax and accounting law requires, typically eight years in India.
• Support messages — up to 24 months after the issue is resolved.
• Analytics — in aggregate form, which no longer identifies you.

Data is transmitted over TLS, passwords are stored only as salted hashes, sessions are short-lived and revocable, and access to production systems is limited to the people who need it. Payment credentials never reach our infrastructure. No system is perfectly secure, so if a breach affects your personal data we will notify you and the relevant authority as the law requires.

Depending on where you live, you may have the right to access, correct, delete, restrict, or object to our processing of your personal data, to withdraw consent, and to receive a portable copy.

Most of these are available directly in your dashboard settings. For anything else, email devangfour@gmail.com and we will respond within 30 days. If you are not satisfied with our response, you may complain to your local data protection authority.

We use strictly necessary cookies to keep you signed in and to protect forms against cross-site request forgery — the Service cannot function without them. Where analytics is enabled, it sets an additional cookie to count visits; you can block it with your browser settings or any standard content blocker without losing functionality.

The Service is not directed at children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact devangfour@gmail.com and we will delete it.

We may update this policy as our practices or the law change. The revision date at the top of this page always reflects the current version, and we will announce material changes on the Service or by email before they take effect.

Devang Patel (trading as TodayBirthday.in)

E-801, Savan Plaza, Yogi Chowk, Surat, Gujarat 395010, India

Privacy: devangfour@gmail.com
Support: devangfour@gmail.com
Phone: +91 85113 11811 (Monday to Friday, 10:00 - 18:00 IST)

Or use our contact form.